Legal information

Privacy Policy

Last updated: July 15, 2026

2.1 Controller

SPHEREMEDIA.AI LTD, Reg. No. HE 495384, Aiolou & Panagioti Diomidou 9, Katholiki, 3020 Limassol, Cyprus is the data controller for bullai.ai. Lead supervisory authority: Office of the Commissioner for Personal Data Protection, Cyprus. Contact: support@bullai.ai.

2.2 Data we collect

We collect account and contact data, including name, email, phone, country and language; verification status for email and SMS; usage and device data, including pages, features, IP and device; subscription and payment metadata, while full card data stays with our payment processor; marketing data, including consents, messages sent and engagement; and community content you post.

2.3 Purposes and legal bases (GDPR Art. 6)

Operating the Service and your subscription is based on contract. Our own marketing by email, SMS or push is based on consent and can be withdrawn at any time. Sharing your contact details with a specific named broker is based on explicit consent per broker and can be withdrawn at any time. Community moderation, security, fraud prevention and product analytics are based on legitimate interests. Tax, accounting and legal duties are based on legal obligation.

2.4 Sharing leads with broker partners

We transfer your name, email and phone number to a partner broker only after you tick a consent box naming that broker. From transfer, the broker is an independent data controller under its own privacy policy; our contracts prohibit it from reselling or sharing your data onward. We are compensated for these referrals - see the Affiliate & Broker Partnership Disclosure.

2.5 Processors and transfers

We use hosting, analytics, email/SMS and payment providers as processors under GDPR Art. 28 agreements. Transfers outside the EU/EEA rely on adequacy decisions or the 2021 Standard Contractual Clauses.

2.6 Retention

Anonymized financial and audit records may remain. Payment providers retain records required by their legal obligations. Deletion-request contact details are removed within 90 days of completion or cancellation. Backup copies expire under the backup policy and must not restore deleted accounts.

2.7 Your rights

EU/EEA users under GDPR and UK users under UK GDPR have rights of access, rectification, erasure, restriction, portability, objection, withdrawal of consent and complaint to their supervisory authority. Direct-marketing objections are always honoured. Cyprus users may contact dataprotection.gov.cy and UK users may contact the ICO. Users elsewhere may exercise applicable local rights by contacting support@bullai.ai.

2.8 Children

The Service is for users aged 18 and over. We do not knowingly process data of minors and delete it on discovery.

Cookie Policy

Essential cookies for login, security, language and consent storage remain available. Optional analytics, advertising and affiliate cookies are enabled only after you accept them in the banner. We remember your choice in this browser for 180 days. You can change it at any time using Cookie settings in the footer, on this page or in Settings. Rejecting optional cookies stops optional tracking and removes accessible optional first-party cookies.

Community Guidelines

Be respectful. Harassment, hate, sexual content, threats, scams, spam and sharing private information without permission are prohibited. Use a message’s menu to report content or block its sender. Moderators may remove content or restrict chat access. Contact Support to ask questions or appeal. Messages and images are sent to OpenAI for safety screening without account contact details. Unchecked content stays private until reviewed.

Deletion instructions
Privacy Policy